Secure the Database Container Directory

How it is checked

Audit method: Manual review

This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.

Review all users that have access to the directory of the containers. On Linux and AIX ensure that only the instance owner has access to the directory of the containers and the container files themselves. On Windows only administrators, and if extended security is enabled, members of the DB2ADMINS group should have access to the directory of the containers and the container files. No other users should have access.

How it is fixed

Fix method: Guidance or infrastructure patch

On Linux and AIX, set the privileges for the directory of the containers so that only the instance owner has full access, and all other users have no access. On Windows, set the privileges for the directory of the containers and the container files so that only administrators, and if extended security is enabled members of the DB2ADMINS group, have full access, and all other users have no access.